Purpose
Vulnerability Analysis
What Does it Do?
Checks the host for SMBv1 signing
When to Use it?
When you see p137, 445 or if there is NBNS/LLMNR traffic on the network
Why Does that Matter?
If SMB signing is not enabled & required it suggests the host is vulnerable to pass-the-hash attacks